Password reset isn't working that well. Try to improve it.
Allow origin * on JSON requests that have the postvalue.